Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm sure this is a simple problem, bu I've looked for days...

I have a SQL server that is part of a domain. The domain has many many users.

I want to allow select permissions to anyone within a particular group on the domain.

Right now I have to add a SQL user for every domain user, I'm sure there is a better way?


bob is a member of group

share|improve this question

2 Answers 2

Create a security group in ADUC.

Add the users to the group.

Create a SQL login for the group.

Map the SQL login to the appropriate SQL roles, databases, permissions, etc.

share|improve this answer


use master ;
create login [DOMAIN\Group] from windows ;
use <database> ;
create user [DOMAIN\Group] from login [DOMAIN\Group] ;
grant select on object:: <schema>.<object> to [DOMAIN\Group] ;

You can create a SQL Login and a Database User from a Windows group. Note that Domain Users still connect as their user account - the SUSER_SNAME() function will return DOMAIN\user (not DOMAIN\Group).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.